Mobile app version of vmapp.org
Login or Join
Shakeerah822

: Switching domain from HTTPS to HTTP I recently launched a new site on an already existing domain, using new hosting. The previous site utilized HTTPS, the new site does not (just HTTP). The

@Shakeerah822

Posted in: #301Redirect #Https #Wordpress

I recently launched a new site on an already existing domain, using new hosting. The previous site utilized HTTPS, the new site does not (just HTTP).

The problem I've ran into is that Google currently has the site indexed as HTTPS. The site is in WordPress, I've tried to 301 redirect HTTPS URLs to HTTP with htaccess (placing rules above the WordPress rules), with no success. The HTTPS version displays the security warning of course (as there is no SSL certificate) and then a 404 if you go past that.

Here is what the htaccess file currently looks like:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{SERVER_PORT} ^443$
RewriteRule ^(.*)$ %{HTTP_HOST}/ [R=301,L]
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>


I've tried other rules as well to redirect the traffic with no luck. Additionally, Google Chrome still redirects example.com to example.com, no amount of clearing cache resolves this issue. All other browsers work fine, example.com works as expected in all browsers.

Has anyone else experienced these issues when moving a domain away from HTTPS? Is there a standard way available to notify Google of the change?

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Shakeerah822

2 Comments

Sorted by latest first Latest Oldest Best

 

@Ann8826881

(Just a guess.)

If the old site used HSTS, you have to wait the number of seconds that were specified in max-age until users that visited the HTTPS version can visit the HTTP version again.

(If HTTPS would still work, you could send the HSTS header and specify a very short max-age, and after most users visited again, stop sending the header, and then transition to HTTP.)

You could remove the domain from your browser’s HSTS Policy cache, but this would of course only help you, not your visitors (unless they do the same). In Chrome/Chromium, you should be able to access the cache under the address chrome://net-internals/#hsts; there you can delete your domain.¹

¹ I guess this doesn’t work if your domain is included in the preload list.

10% popularity Vote Up Vote Down


 

@Gretchen104

Why not get a free SSL certificate from Lets Encrypt, then your https will work. Ride the horse in the direction it is going...

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme